[quote='815475021, krzsiwek, /thread/815475, /profile/krzsiwek'] Is this behavior known and expected? [/quote] Probably [1]. But it’s useful to have a specific benchmark to highlight this cost. I recommend that you file a bug describing the issue, how you’re testing the performance, and what results you got. Please post your bug number, just for the record. [quote='815475021, krzsiwek, /thread/815475, /profile/krzsiwek'] Is there anything we can do to mitigate [this] in our application? [/quote] Not that I can think of. There isn’t really much wiggle room here. Either the property is on or off and, assuming a specific flows hits your packet tunnel provider in both cases, it sees the same set of packets for that flow. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] Historically the networking stack didn’t have fancy features like enforceRoutes, and there’s been decades of optimisation for that simple case.